[Full-Disclosure] Re: W2K source "leaked"?

2004-02-17 Thread jim_walsh
That list is easily found all over the Internet now. http://scowerer.piratecove.net/files/w2kfiles.txt Jim Walsh Operating Systems Administrator Server Operations and Support Center Goodyear Tire and Rubber Byron Copeland <[EMAIL PROTECTED]> 02/14/2004 01:31 AM To Víctor <[EMAIL PROTECTED]>

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-16 Thread somenym81
The following Bittorrent tracker is still operational http://www.benzedrine.cx/mirror/w2k.zip.torrent ___ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html

Re: [Full-Disclosure] Re: W2K source "leaked"?

2004-02-15 Thread Brent J. Nordquist
On Sat, 14 Feb 2004, Nomen Nescio <[EMAIL PROTECTED]> wrote: > , > | [EMAIL PROTECTED]:~> grep gnu files.txt | head > | 19282 07-26-00 01:41 win2k/private/genx/ie/inc/gnumakefile > [...] > ` > > WTF? Evidence is growing that the leak was from Mainsoft, to whom Microsoft gave the

RE: [Full-Disclosure] Re: W2K source "leaked"?

2004-02-14 Thread Nick FitzGerald
"Drew Copley" <[EMAIL PROTECTED]> wrote: > It is true that there are exploits which can go under the radar. > > I have a lot of fascination for these. > > Customers can't report to AV or security companies trojans they never > even knew they had. > > The requirement level is high, however: Y

Re: [Full-Disclosure] Re: W2K source "leaked"?

2004-02-14 Thread Pablo Ruiz Garcia
Meet just your security needs <[EMAIL PROTECTED]> - Original Message - From: "Nomen Nescio" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, February 14, 2004 1:40 AM Subject: [Full-Disclosure] Re: W2K source "leaked"? > Víctor <[EMAIL

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-14 Thread Nomen Nescio
Víctor <[EMAIL PROTECTED]> writes: > Check this out > > http://heim.ifi.uio.no/~mortehu/files.txt , | [EMAIL PROTECTED]:~> grep gnu files.txt | head | 19282 07-26-00 01:41 win2k/private/genx/ie/inc/gnumakefile | 3054 07-26-00 01:41 win2k/private/genx/ie/uuid/gnumakefile | 1

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Byron Copeland
On Thu, 2004-02-12 at 19:59, VÃctor wrote: > dont blame me... the ring0_src is the linux kernel ... sorry about that > > Check this out > > http://heim.ifi.uio.no/~mortehu/files.txt > well, it looks like University of OSLO has it figured out. That URL is not valid. -b __

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Valdis . Kletnieks
On Fri, 13 Feb 2004 20:22:32 CST, Paul Schmehl <[EMAIL PROTECTED]> said: > I suspect that flaws will probably be found. After all, they already have > been found without the source. It's only logical that with the source in > hand more flaws will be found. And at a vastly increased rate. We

RE: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Paul Schmehl
--On Saturday, February 14, 2004 1:35 AM +0100 Tobias Weisserth <[EMAIL PROTECTED]> wrote: Hi Paul, Odd. I would have thought the answer was self evident. You take the standard precautions that every security person should know. So just because the source code hasn't been leaked until now means

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Valdis . Kletnieks
On Sat, 14 Feb 2004 01:35:19 +0100, Tobias Weisserth <[EMAIL PROTECTED]> said: > Personally I don't think this leak will unavoidably lead to a serious > increase of heavy and even more sneakier exploits. We already have them. > The last week has been evidence enough. Maybe this will even lead to

RE: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Tobias Weisserth
Hi Paul, Am Fr, den 13.02.2004 schrieb Schmehl, Paul L um 22:22: ... > > Drew Copley once said: > > > > > We should prepare for this now. > > > > Anyone care to comment how we can prepare for this?? Except > > for moving from the Windows platform, I don't see how we can. > > Please do not take

RE: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Drew Copley
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Paul O'Malley > Sent: Friday, February 13, 2004 9:10 AM > To: Drew Copley > Cc: Gadi Evron; [EMAIL PROTECTED]; > [EMAIL PROTECTED] > Subject: [Full-Disclosure]

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Ake Nordin
At 11:59 2004-02-13 -0500, Joe Quigley thusly engraved: >Drew Copley once said: >> We should prepare for this now. > >Anyone care to comment how we can prepare for this?? Try http://lists.netsys.com/pipermail/full-disclosure/2003-November/013584.html >Thanks in advance. My pleasure. Or Jason Coo

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Sebastian Dietz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 How cute ;) did you notice the related link at the Micro$oft site? It links to Shared Source ;-)) ciao Sebastian [EMAIL PROTECTED] wrote: |Oh, it's real. Microsoft has fully acknowledged it... | |http://www.microsoft.com/presspass/press/2004/Feb0

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Kevin Dwyer
Víctor wrote: And here is a torrent where it seem to be the source http://www.skittlebrau.org/ring0_src.tar.bz2.torrent This is all the information I have until now I believe that's merely a torrent pointing at the Linux kernel source. Yes, I read that Slashdot comment too. Lesson to learn: Slash

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Gadi Evron
I have seen these files... personaly I find it hard to belive the NT / 2k base is bigger that a 200mb zip. What it does look like is a core subset of some parts of windows with sources. I can bet that what is in the release was heavily audited and not realy a "loss" in anyones book. The kernel32 s

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Gadi Evron
As for your comments on zero day, I have some strong opinions on that: First, I recall two massive zero day exploits being used last year. One in IE being used by spammers and one in IIS. Two out of how many? We should expect this trend to advance exponentially, I would think, just considering th

RE: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Schmehl, Paul L
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Joe Quigley > Sent: Friday, February 13, 2004 11:00 AM > To: Drew Copley; Gadi Evron; [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: [Full-Disclosure] RE: W2K sourc

RE: [Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Drew Copley
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Gadi Evron > Sent: Friday, February 13, 2004 9:51 AM > To: Drew Copley > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: [Full-Disclosure] Re: W2K source "leaked&

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread ypwhich
D] > Subject: Re: [Full-Disclosure] RE: W2K source "leaked"? > > On Fri, 13 Feb 2004 14:53:42 +0200, Georgi Guninski said: > > > A senior Microsoft Corp. executive told a federal court last week that > > sharing information with competitors could damage national security and

[Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Drew Copley
> -Original Message- > From: Joe Quigley [mailto:[EMAIL PROTECTED] > Sent: Friday, February 13, 2004 9:00 AM > To: Drew Copley; Gadi Evron; [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: RE: W2K source "leaked"? > > Drew Copley once said: > > > We should prepare for this now. >

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread SMORRIS
>This seem the dir of the Windows source code, I dont know if it a hoax. > >And here is a torrent where it seem to be the source >http://www.skittlebrau.org/ring0_src.tar.bz2.torrent This appears to be a dead link. ___ Full-Disclosure - We believe

[Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Joe Quigley
Drew Copley once said: > We should prepare for this now. Anyone care to comment how we can prepare for this?? Except for moving from the Windows platform, I don't see how we can. Please do not take this as knock against Drew and his opinion. It most certainly isn't. I really would like to hear o

[Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Paul O'Malley
Hi, If you do work on or would like to work on Free Open Source Software code, do not expose yourself to this, it is dangerous. Simple if you ain't seen it you can't be influenced by it [1]. You may have had opportunity but it was not your problem. RMS [2] was right in his essays. Best regards,

Re: [Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Valdis . Kletnieks
On Thu, 12 Feb 2004 23:06:41 EST, Allen/gore/SlackWareWolf said: > I think they should release the source for NT anyway. They > are pretty much dropping it, and they say it is so badly > made they can hardly fix it, well, why not let the REAL > hackers out there who can make an OS, take a look a

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Stefan Guha
> And here is a torrent where it seem to be the source > http://www.skittlebrau.org/ring0_src.tar.bz2.torrent No, this is definitely not the leak, but some linux source rip or something. the real packed leak files are 200 mb win2k and 240 mb winnt4. as far as i can see it's the shell, the win32 s

RE: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Nick Jacobsen
: sil Sent: Thu 2/12/2004 4:20 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [Full-Disclosure] RE: W2K source "leaked"? On Thu, 12 Feb 2004 [EMAIL PROTECTED] wrote:

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread morning_wood
>it has been leaked , also for the winnt 4 and the windows XP sourcecode > >files like : windows.2000.source.code-IND are now roaming irc channels and >webpages ... it is an hard day for microsoft i guess I have seen these files... personaly I find it hard to belive the NT / 2k base is bigger t

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread madsaxon
At 11:21 AM 2/13/2004 -0500, [EMAIL PROTECTED] wrote: Anybody want to place bets that *some* idiot is going to try to blame our failure to find Osama bin Laden on the source code leak? Of course--it's so obvious. Bin Laden slipped out through one of the government-mandated backdoors when no one was

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Valdis . Kletnieks
On Fri, 13 Feb 2004 14:53:42 +0200, Georgi Guninski said: > A senior Microsoft Corp. executive told a federal court last week that > sharing information with competitors could damage national security and even > threaten the U.S. war effort in Afghanistan. He later acknowledged that some > Microso

RE: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread John . Airey
> -Original Message- > From: Georgi Guninski [mailto:[EMAIL PROTECTED] > Sent: 13 February 2004 12:54 > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: Re: [Full-Disclosure] RE: W2K source "leaked"? > > > http://www.eweek.com/article2/0,3959,

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Bernie, CTA
On 13 Feb 2004 at 14:53, Georgi Guninski wrote: > http://www.eweek.com/article2/0,3959,5264,00.asp > Allchin: Disclosure May Endanger U.S. > By Caron Carlson > May 13, 2002 > > > A senior Microsoft Corp. executive told a federal court last week > that sharing information with competitors could

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread jim_walsh
There are four different versions that appear to be floating around the internet, under 1GB in size, so its definately a 'partial leak' as full code is reported as being near 40-50GB in size uncompressed. As for your press release, M$ has acknowledged it... http://www.microsoft.com/presspass/pre

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread cdowns
Morning All, The scary part is that Microsoft officials could tell the federal court circuit this and "They will" believe it. Who the hell in thier right mind would leave national security up to a Windows operating system... Known to attacks. .. oh wait we do - heh on another note: wasn

Re: [Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Mike Roetto
"sil" <[EMAIL PROTECTED]> To: "Gadi Evron" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>; "Thor Larholm" <[EMAIL PROTECTED]> Sent: Thursday, February 12, 2004 6:42 PM Subject: [Full-Disclosure] Re: W2K source "lea

RE: [Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Otero, Hernan (EDS)
http://www.microsoft.com/presspass/press/2004/Feb04/02-12windowssource.asp -Original Message- From: sil [mailto:[EMAIL PROTECTED] Sent: Jueves, 12 de Febrero de 2004 20:42 To: Gadi Evron Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; Thor Larholm Subject: [Full-Disclosure] Re: W2K source

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Georgi Guninski
http://www.eweek.com/article2/0,3959,5264,00.asp Allchin: Disclosure May Endanger U.S. By Caron Carlson May 13, 2002 A senior Microsoft Corp. executive told a federal court last week that sharing information with competitors could damage national security and even threaten the U.S. war effort

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Víctor
dont blame me... the ring0_src is the linux kernel ... sorry about that Check this out http://heim.ifi.uio.no/~mortehu/files.txt This seem the dir of the Windows source code, I dont know if it a hoax. And here is a torrent where it seem to be the source http://www.skittlebrau.org/ring0_src.ta

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread sil
This is the CNET article going up. http://news.com.com/2100-7349_3-5158496.html Again, I don't know/care if this is true of MS' source code being posted, and I too smell something fishy in the air with this whole 'story' coming out. Considering there is supposedly 600mb's or so of alleged code,

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Allen/gore/SlackWareWolf
I think they should release the source for NT anyway. They are pretty much dropping it, and they say it is so badly made they can hardly fix it, well, why not let the REAL hackers out there who can make an OS, take a look at it. Maybe they are a little nervouse? Maybe people would see it was b

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread p0eta
Hi people. Gadi, don´t forget this programs > http://www.microsoft.com/presspass/features/2001/may01/05-03csm.asp and the new ones. C NNL Newsletter { is back on 02/22 } http://www.elistas.net/lista/nnl - Original Message - From: "Gadi Evron" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> C

[Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread Bluehawk
it has been leaked , also for the winnt 4 and the windows XP sourcecode   files like : windows.2000.source.code-IND are now roaming irc channels and webpages ... it is an hard day for microsoft i guess    ---Original Message---   From: [EMAIL PROTECTED] Date: 13-2-2004 0:44:55 To: [E

[Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread sil
On Thu, 12 Feb 2004 [EMAIL PROTECTED] wrote: > for Whistler (now Windows XP) had been leaked, though they never > confirmed it. > > http://www.wired.com/news/business/0,1367,35135,00.html > > WinBeta is also reporting on the new leak > > http://www.winbeta.org/winbeta/forums/index.php?showtopic=

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-13 Thread Zhenkai Liang
Microsoft has confirmed the leak. See the link below: http://www.microsoft.com/presspass/press/2004/Feb04/02-12windowssource.asp Zhenkai On Thu, 12 Feb 2004, Gadi Evron wrote: > A couple of days ago a friend of mine drew my attention to the source > making rounds on the encrypted p2p networks,

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-13 Thread webheadport80
Oh, it's real.  Microsoft has fully acknowledged it... http://www.microsoft.com/presspass/press/2004/Feb04/02-12windowssource.asp WebHead -BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Andre Ludwig wrote: | I am still up in the air on if this is legit or not. http://customwire.ap.org/dynam

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-12 Thread wolvie
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Andre Ludwig wrote: | I am still up in the air on if this is legit or not. http://customwire.ap.org/dynamic/stories/M/MICROSOFT_SOURCE_CODE?SITE=WASET&SECTION=HOME&TEMPLATE=DEFAULT http://news.com.com/2100-7349_3-5158496.html?tag=nefd_top sounds qu

Re: [Full-Disclosure] Re: W2K source "leaked"?

2004-02-12 Thread Byron Copeland
heh, figures. On Thu, 2004-02-12 at 22:22, gabriel rosenkoetter wrote: > On Thu, Feb 12, 2004 at 06:26:39PM -0800, Nick Jacobsen wrote: > > http://smokeherb.com/windows/ > > Both NT4 and 2000. > > > > As a side note, there is actually very little content in these files... > > this is a very much

Re: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-12 Thread Byron Copeland
http://slashdot.org/ is also ranting about it. On Thu, 2004-02-12 at 21:40, [EMAIL PROTECTED] wrote: > I know some people have been talking about this as being a false news > story, but now there is confirmation from Redmond. > > http://www.komotv.com/stories/29778.htm > > > > > Regards > >

[Full-Disclosure] Re: W2K source "leaked"?

2004-02-12 Thread gabriel rosenkoetter
On Thu, Feb 12, 2004 at 06:26:39PM -0800, Nick Jacobsen wrote: > http://smokeherb.com/windows/ > Both NT4 and 2000. > > As a side note, there is actually very little content in these files... > this is a very much "partial" leak... Just so no one coming in to work on Friday wastes those poor peo

[Full-Disclosure] RE: W2K source "leaked"?

2004-02-12 Thread tlarholm
I know some people have been talking about this as being a false news story, but now there is confirmation from Redmond. http://www.komotv.com/stories/29778.htm Regards Thor Larholm Senior Security Researcher PivX Solutions 24 Corporate Plaza #180 Newport Beach, CA 92660 http://www.pivx.com [

[Full-Disclosure] RE: W2K source "leaked"?

2004-02-12 Thread Drew Copley
> -Original Message- > From: Gadi Evron [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 12, 2004 1:49 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED]; Thor Larholm > Subject: W2K source "leaked"? > > A couple of days ago a friend of mine drew my attention to the source > making

RE: [Full-Disclosure] RE: W2K source "leaked"?

2004-02-12 Thread Andre Ludwig
/usenix-win2000/invitedtalks/lucovsky_html/sld01 5.htm Andre Ludwig CISSP -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, February 12, 2004 1:59 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Full-Disclosure] RE: W2K source

[Full-Disclosure] RE: W2K source "leaked"?

2004-02-12 Thread tlarholm
This is not the first time that people have reported leaked copies of Windows source code. In 2000, Wired News reported that the source code for Whistler (now Windows XP) had been leaked, though they never confirmed it. http://www.wired.com/news/business/0,1367,35135,00.html WinBeta is also repor